I've seen this "solution" quite often, and compared to limitlogon I still think it's a good way of doing it. I wouldn't want to deploy a infrastructure just to make sure my users don't connect from different workstations.
Would be much nicer if there would be a policy which allows logon only if homedir is available, however doing it in the logon-script works pretty well. Gruesse - Sincerely, Ulf B. Simon-Weidner MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz Weblog: http://msmvps.org/UlfBSimonWeidner Website: http://www.windowsserverfaq.org Profile: http://mvp.support.microsoft.com/profile=35E388DE-4885-4308-B489-F2F1214C811D |-----Original Message----- |From: [EMAIL PROTECTED] |[mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris |Sent: Thursday, February 16, 2006 6:57 PM |To: ActiveDir.org |Subject: Re: [ActiveDir] Limit Logon thru GPO | |Another way I have seen this done is via a logon script and |the users home directory, basically the directory is limited |to 1 connection then if this number is exceeded the computer |logs the user off. | |Very crude I know. | |Mark | |-----Original Message----- |From: Jacqui Hurst <[EMAIL PROTECTED]> |Date: Thu, 16 Feb 2006 17:46:35 |To:[email protected] |Subject: RE: [ActiveDir] Limit Logon thru GPO | | | |I have seen CConnect working fine in a Windows 2003 environment. | | |Jacqui. | | |This cconnect.exe seems interesting anybody used it with 2003 |Server? or is it strictly a NT/2000 tool? | | | |From: [EMAIL PROTECTED] |[mailto:[EMAIL PROTECTED] On Behalf Of |Darren Mar-Elia |Sent: Thursday, February 16, 2006 8:17 AM |To: [email protected] |Subject: RE: [ActiveDir] Limit Logon thru GPO | |There is no native way of doing this in GP, but there is the |Resource Kit utility Cconnect.exe that tries to accomplish the |same thing without messy AD partitions (not at all to imply |that anything remotely related to AD is messy :)) | |Darren | | |From: [EMAIL PROTECTED] |[mailto:[EMAIL PROTECTED] On Behalf Of Aaron Visser |Sent: Thursday, February 16, 2006 7:59 AM |To: [email protected] |Subject: [ActiveDir] Limit Logon thru GPO Sorry if this |question has already been asked but I was sure I saw this at |one time and now I cannot find it anywhere. I am beginning to |think it was all just a wishful dream. | |Q. Is it possible to limit the number of logon’s a user may |have at any one moment, using GPO? | |Microsoft has released the LimitLogin tool, which you can |download from |http://download.microsoft.com/download/f/d/0/fd05def7-68a1-4f71 |-8546-25c359cc0842/limitlogin.exe. The tool stores logged-on |information in a custom AD partition (dc=limitlogin, |dc=<domain>, dc=<com>; e.g., |dc=limitlogin,dc=savilltech,dc=com) via a Microsoft IIS 6.0 |(Windows Server 2003) hosted Web service, a client component, |and a logon and logoff script. | |This is the only answer I could find on the internet but |surely this cannot be the only way, like I mentioned I was |sure I saw this at one time and now I cannot find it anywhere. |Was it all a dream? Should MS get there act together? or did I |really see this? I would rather not use LimitLogon as it seems |like a bit of a pain in the a$$ to setup and I am pretty sure |it is irreversible. | | |Thanks, | | |Aaron Visser | |Computer Services Tech |School District #33 |Chilliwack Secondary School |[EMAIL PROTECTED] |604.795.7295 | |[EMAIL PROTECTED] |r¯zm§ÿðà šŠV«r¯yÊ&ý§-Š÷Š¾4™¨¥iËb½çb®Šà List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
